Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/KEKiMc4pz1W5M9ehPykZvnIYXxw.roa
File: KEKiMc4pz1W5M9ehPykZvnIYXxw.roa (raw, json)
Hash identifier: iYiFPHZS15VBWB0zLCeJfxxVPk9m64F7S8RvYGBw6QI=
Subject key identifier: 28:42:A2:31:CE:29:CF:55:B9:33:D7:A1:3F:29:19:BE:72:18:5F:1C
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 018587BDCF794059A432054E4776E37828BB
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/KEKiMc4pz1W5M9ehPykZvnIYXxw.roa
Signing time: Fri 06 Jan 2023 15:40:41 +0000
ROA not before: Fri 06 Jan 2023 15:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56902
IP address blocks: 45.142.138.0/24 maxlen: 24
45.142.137.0/24 maxlen: 24
45.142.139.0/24 maxlen: 24
45.142.136.0/24 maxlen: 24
5.100.240.0/24 maxlen: 24
5.100.243.0/24 maxlen: 24
5.100.242.0/24 maxlen: 24
5.100.241.0/24 maxlen: 24
185.128.125.0/24 maxlen: 24
185.128.124.0/24 maxlen: 24
185.187.129.0/24 maxlen: 24
185.187.128.0/24 maxlen: 24
185.187.131.0/24 maxlen: 24
185.187.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:87:bd:cf:79:40:59:a4:32:05:4e:47:76:e3:78:28:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Jan 6 15:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2842a231ce29cf55b933d7a13f2919be72185f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:5a:24:d7:1a:bf:24:36:9f:7d:fb:67:52:
40:6c:88:fc:cc:23:12:58:7e:e6:3c:c9:13:05:08:
a9:d9:ad:96:43:0a:0f:5c:67:1f:ce:7e:72:88:ef:
3a:c5:c4:67:49:80:99:11:09:8d:ac:c2:7d:8f:4a:
8a:59:26:f0:1e:8b:8c:69:f9:0d:b6:fe:60:74:ad:
93:58:fc:87:eb:77:f8:8f:76:a3:61:55:90:62:9e:
4f:38:29:2b:6e:64:76:ca:38:24:c5:2f:dc:df:85:
84:93:f6:f0:73:e0:e8:8b:2e:1a:8c:3c:0b:49:56:
81:7a:e1:d1:1a:32:7a:30:d5:c9:b7:25:26:9c:51:
f3:0f:55:0f:6d:d5:ec:03:0f:7b:ad:51:dd:2a:30:
8b:1d:ce:ed:e2:28:49:47:1b:30:09:fb:b5:25:57:
e0:13:af:c8:71:76:a9:87:2b:67:51:2a:a3:0f:34:
83:11:ce:8f:42:ad:36:57:15:88:b4:73:18:ca:a1:
04:47:8c:b7:75:d2:a3:52:63:d3:7b:33:b2:62:7e:
f4:55:67:12:d7:90:1b:af:61:f0:7d:ff:2c:b3:5b:
9b:45:29:f0:4e:6f:52:e4:e2:5c:56:45:97:a3:df:
7a:bd:95:19:07:d6:e7:bb:56:d6:11:43:2e:23:a6:
75:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:42:A2:31:CE:29:CF:55:B9:33:D7:A1:3F:29:19:BE:72:18:5F:1C
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/KEKiMc4pz1W5M9ehPykZvnIYXxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.240.0/22
45.142.136.0/22
185.128.124.0/23
185.187.128.0/22
Signature Algorithm: sha256WithRSAEncryption
05:b6:71:1d:eb:22:44:93:b6:6d:de:67:91:b2:a4:ae:60:ca:
bc:71:a5:d8:44:7a:ad:e1:ef:5a:b4:ce:66:cf:24:70:6f:0e:
1d:2b:0e:92:ea:3c:00:61:63:a3:bb:f8:8a:97:f2:c9:64:8a:
6d:2c:ed:94:af:8a:37:b9:8c:31:7a:fd:cc:97:e9:6d:47:8a:
7c:a9:a4:82:af:c5:65:c7:e1:7d:a4:fa:7b:4c:8e:1f:c0:7e:
55:6e:f0:62:af:6a:02:d2:23:3f:19:f1:7a:48:5a:12:d8:aa:
39:97:1e:39:87:25:ec:f2:30:49:3c:0a:a2:8c:cf:cb:d2:81:
46:1d:7c:4d:75:f3:91:c2:2c:5f:be:58:c2:5e:13:de:4c:83:
f5:6c:d8:d1:53:f7:cd:a0:56:dd:1b:3e:81:08:84:53:f8:da:
54:7a:33:da:11:a1:fd:ea:2f:bf:aa:08:fe:ab:42:21:c1:a4:
9f:31:bc:6a:d2:e9:7a:48:e7:30:cb:73:c9:b1:78:77:6f:ea:
46:9f:a8:30:4b:32:52:e8:64:80:bb:cb:89:ff:2b:b3:70:44:
8b:50:80:e9:37:23:46:f9:be:a6:a8:b8:04:08:b9:c2:3d:30:
4b:3e:ac:d9:80:36:69:7e:52:ce:03:58:5a:a5:95:2f:97:2f:
39:57:ac:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:14 2024 by rpki-client on console-fra.rpki-client.org